KUALA LUMPUR: CTOS Digital Bhd
has detected unauthorised access to an environment supporting its consumer business, with some processed consumer information accessed in the incident.
“Upon detection, the company immediately activated the necessary protocols and successfully contained the affected environment,” the credit reporting agency said in a filing with Bursa Malaysia.
CTOS has also engaged an independent incident response team to conduct a forensic investigation.
Based on the assessment so far, the incident was confined to the identified environment, with no other environments affected.
“The company's systems remain fully secure and functional, and no other environments were impacted,” it said.
The investigation found that certain data files containing a limited subset of processed consumer information had been accessed.
“A subset of the company's credit reporting services is temporarily unavailable as we complete the necessary remediations.
“The company's other business operations and services continue to operate and function normally. Based on available facts, there is no material financial impact to the company,” CTOS said.
The company has notified the relevant authorities and is reviewing and strengthening its cybersecurity measures in accordance with the independent forensic report.
